Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
File:                     15D759D621CE11EC99FD3C45D8A014CE.roa (raw, json)
Hash identifier:          Z0x5EekFveN2pWj6qKvIhL9pU7FdgGYeZB/I/R2XBNw=
Subject key identifier:   8D:DA:90:20:54:CB:79:7B:C5:19:95:35:91:24:59:D2:6F:14:10:34
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       15
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
Signing time:             Thu 30 Sep 2021 09:09:15 +0000
ROA not before:           Thu 30 Sep 2021 09:09:09 +0000
ROA not after:            Sat 30 Sep 2023 09:09:09 +0000
asID:                     328327
IP address blocks:        102.140.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 30 09:09:09 2021 GMT
            Not After : Sep 30 09:09:09 2023 GMT
        Subject: CN=61557ebb-1d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:b2:1e:96:93:f6:66:ac:28:67:5c:b5:3f:
                    a2:ca:66:97:f3:a9:fa:f1:97:f0:04:5a:c4:f3:19:
                    7e:58:16:07:03:3e:b2:93:e9:37:43:c4:4a:33:8d:
                    9f:d0:02:0c:41:d0:e6:fd:a8:ef:cd:a4:4d:8d:59:
                    17:7b:72:76:cb:00:68:0a:e2:11:24:57:34:c8:5e:
                    33:72:6a:a6:ab:2e:51:2f:c2:a2:ef:ee:31:7e:4f:
                    23:2f:43:71:b4:e8:e8:7a:6e:a5:f4:da:01:03:cf:
                    9d:5d:c1:b0:36:2f:33:1c:11:04:77:33:e8:f9:9b:
                    39:24:7a:28:b8:f9:04:d7:9a:44:5f:42:a6:ad:83:
                    b6:e1:9b:b1:ea:bb:44:a4:e3:fb:86:7f:70:c0:0f:
                    a7:cd:89:9c:f7:6d:ce:24:63:ed:0c:3b:69:a6:0e:
                    8b:6c:91:59:cc:5a:f6:4c:6e:3d:2e:ce:62:8d:9f:
                    3f:47:47:a5:26:fd:55:1b:46:0b:ff:e3:f0:ac:ad:
                    18:db:1a:58:ec:ea:18:6c:74:04:3c:eb:dc:84:f5:
                    da:29:33:4d:76:07:94:23:33:cf:08:56:68:ea:91:
                    1f:4a:fe:da:cf:d8:6a:04:f9:e5:0a:77:ab:b7:94:
                    2c:9c:8d:87:2c:2e:35:03:9f:43:9f:e4:ce:f0:a8:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DA:90:20:54:CB:79:7B:C5:19:95:35:91:24:59:D2:6F:14:10:34
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/15D759D621CE11EC99FD3C45D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.140.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:1f:f6:eb:4c:91:4d:98:3d:a1:1b:b7:de:97:73:48:6a:
         14:c1:ab:09:53:85:31:c0:f6:2e:ab:ae:f1:9c:3e:dd:88:bd:
         fb:c9:94:2e:19:82:9a:14:ee:cb:c5:e0:6c:ed:af:57:88:c6:
         ce:41:28:dd:c7:d5:d6:e5:0a:9d:39:db:6b:39:74:31:8a:bf:
         ce:78:ea:a5:f0:05:27:ee:cf:06:e2:68:08:54:d2:53:71:bb:
         83:93:3a:fb:aa:48:c7:f3:44:29:b1:c7:71:a4:35:ca:43:86:
         b3:52:bc:01:75:18:96:3e:c3:eb:e2:ad:89:98:f3:32:d4:a4:
         33:e3:49:de:ca:b4:6b:77:4e:18:98:2f:b5:c9:27:f0:fc:68:
         97:d0:6f:fa:bc:80:7b:b6:f8:c0:5a:26:b8:b3:f8:e1:00:6f:
         d4:f3:de:97:d5:47:ad:d4:1c:22:b8:19:19:d4:cb:be:df:be:
         29:1b:af:71:76:d7:8c:b5:63:f9:55:77:95:79:89:3f:c3:12:
         73:1c:0c:0f:a5:20:22:07:9a:b7:d9:a1:ce:cd:2a:70:9b:49:
         5b:dc:b0:cf:e7:ad:9f:06:da:c5:fb:7b:ea:86:fb:7a:54:e3:
         b9:34:4e:f3:53:4b:ca:03:78:39:4c:8b:c9:ce:c3:85:5f:68:
         90:03:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----